Measure firewall performance to ensure that it’s within
acceptable norms and so that you understand the effect of decryption
If you want to decrypt more traffic than your firewall
resources support, the best practice is to scale up the resources
so that you have enough to decrypt everything you want to decrypt
and secure the network.
Educate new employees as you hire them so that they understand
your decryption policy and won’t be surprised.
Periodically review, and if necessary, update Decryption
policies and profiles.
Use Palo Alto Networks documentation and other resources
to learn more about Decryption and to look up information:
To check up-to-date statistics on the percentages of different
ciphers and protocols in use on the 150,000 most popular sites in
the world so you can see trends and understand how widespread worldwide
support is for more secure ciphers and protocols, visit Qualys SSL
Labs SSL Pulse page.